Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File:                     9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier:          TDm+XHiGe/KbeafpReDHJoct9UCgA95W6ub7/nCVw88=
Subject key identifier:   EA:97:8A:B3:32:C9:14:98:F8:33:DC:DF:34:E4:4D:A7:2C:26:80:0C
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       018F22DD41A58277F893956B067F5DEDE8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number:          0C25
Signing time:             Sun 28 Apr 2024 04:01:16 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:16 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:16 +0000
Files and hashes:         1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: NrTl9byNYn1n1kVmv7QsmKh4aUOq4f1CJ9j0iivHM9A=)
                          2: dmtrpwptwr9hPNxzDT_CZJFmKt8.roa (hash: NmXg86iyWPbYwU3Mw7PK21dCDF7KBHHcSdiYWJSGSRY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:41:a5:82:77:f8:93:95:6b:06:7f:5d:ed:e8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Apr 28 04:01:16 2024 GMT
            Not After : Apr 29 04:01:16 2024 GMT
        Subject: CN=ea978ab332c91498f833dcdf34e44da72c26800c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:c1:2b:76:0f:a7:c3:f0:18:b6:f5:83:1b:
                    a9:17:fb:bb:9f:93:ed:e0:07:bd:d7:4e:7d:41:ff:
                    cd:33:87:7c:06:ee:d3:b3:d7:c3:d3:b9:32:dc:78:
                    8d:8e:b3:65:a8:88:9e:81:17:9f:f8:08:23:f9:8a:
                    74:17:54:8b:e9:2f:af:8b:68:50:eb:19:c3:1e:72:
                    1d:37:e4:51:29:f2:33:fe:74:c0:a8:b6:0e:11:b8:
                    1e:5c:07:cb:4d:4c:d8:d6:9e:b5:7d:fa:31:51:61:
                    52:df:84:66:14:44:32:2e:49:18:e9:78:90:b7:42:
                    e5:b2:37:8e:7f:0d:fe:50:f4:dd:14:ae:98:ce:5b:
                    b4:a2:cb:ea:4a:94:08:ff:bf:f1:45:16:bf:ff:66:
                    13:c6:43:6b:ec:b4:53:18:9e:40:28:a7:ed:fb:b6:
                    3d:c9:1f:8f:a5:7e:28:79:42:f0:97:7e:10:9b:07:
                    b0:15:71:88:63:a5:41:97:79:a8:67:15:65:cb:58:
                    78:3d:04:f4:f7:f7:75:18:26:45:de:0e:fd:97:c8:
                    59:90:65:fe:73:0c:1f:e8:92:fb:5f:35:be:0f:b9:
                    bc:7d:bd:e3:8e:b2:12:f9:33:75:9f:bf:da:92:a3:
                    cf:69:bd:30:b3:5a:48:86:5b:cc:0e:41:b1:fb:b5:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:97:8A:B3:32:C9:14:98:F8:33:DC:DF:34:E4:4D:A7:2C:26:80:0C
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ad:21:aa:c4:c8:f3:ec:2a:bd:72:86:cf:ba:5b:53:e8:2a:
         fa:a9:54:d0:8f:78:a9:b9:85:d6:b0:7f:81:ee:8d:c9:70:0c:
         45:2e:b5:38:56:b8:ed:cc:fe:de:f2:e1:05:39:4c:13:58:9b:
         79:9d:0d:9d:2a:56:70:1a:4d:06:a2:b0:38:13:5d:97:d1:48:
         26:f0:9d:51:fa:e9:ac:b1:31:42:b5:aa:a0:bf:a4:e0:3c:1b:
         2d:06:20:c8:ab:97:71:d0:ea:85:c8:25:79:f8:be:87:2b:f9:
         d0:24:f7:45:5f:fc:68:f0:6f:64:e5:55:6d:27:a1:9f:f2:4d:
         8b:13:4f:f7:87:72:e9:29:2c:35:e3:6c:f8:ac:90:49:82:86:
         ad:0a:a4:e2:80:cc:9c:bb:c1:dd:61:6a:75:ba:b2:f7:75:0b:
         5a:af:76:5f:27:8c:b9:3a:8d:17:d3:5d:a3:89:59:52:2b:32:
         c6:b8:7e:23:f5:a5:6e:6a:c4:96:62:18:d9:ae:b1:73:95:78:
         1a:68:1f:3d:0c:b8:09:99:d7:46:7d:d7:51:1f:2b:df:f5:aa:
         a9:ac:f2:55:7b:d4:45:a7:52:68:59:f4:52:49:1d:9b:3d:4b:
         10:95:d0:50:d0:0e:49:4a:b4:24:8d:00:a2:f1:3c:24:93:ee:
         83:1c:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:48:03 2024 by rpki-client on console-ams.rpki-client.org